fwor
nieb
Behavioral task
behavioral1
Sample
d08da6dade4a12ce610cccb113b32b36_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d08da6dade4a12ce610cccb113b32b36_JaffaCakes118
Size
300KB
MD5
d08da6dade4a12ce610cccb113b32b36
SHA1
7036eed542e299997055d99ec025be6d3b3b24b2
SHA256
94f417132335b0a6cb3ec476b6f88cfa9c3ac095e44dc07bad01172584d15f29
SHA512
de036d6731bd270e892e7e6681f34399903aec7f5d01aa535c4780de95eab5b2af72a36824a90891197f5dc9115a347511b07dfc1a608ba75aaf7c55f5726be0
SSDEEP
6144:Dzuc6wt89oOKaP0DJpdJPWPp+peOLlYDeVLikaSluhRFqz:HZ6mgtbP0JpdJ+Pp+pLWDe9ikKR4z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d08da6dade4a12ce610cccb113b32b36_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fwor
nieb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ